instrument-integration

Pass

Audited by Gen Agent Trust Hub on Nov 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides structured instructions for SDK integration across multiple platforms (Web, Mobile, Server-side). It correctly identifies project contexts and uses appropriate package managers.
  • [SAFE]: Secret management follows industry standards. The skill explicitly instructs the agent to store project tokens in environment variable files (like .env or .env.local) and to reference them in code rather than hardcoding them.
  • [SAFE]: The use of the projects-get MCP tool is a secure method for retrieving project tokens from an authenticated source. The retrieved data is used only for local configuration.
  • [SAFE]: Documentation and reference projects point exclusively to official vendor domains and trusted source code repositories. No suspicious external URLs or data exfiltration patterns were identified.
  • [SAFE]: Command execution is restricted to standard developer workflows, such as installing dependencies through package managers and running local linting/formatting tools on files modified during the integration session.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 8, 2026, 03:07 AM